From: Shivani Bhardwaj <shivani@oisf.net>
Date: Fri, 22 Mar 2024 06:07:39 +0000 (+0530)
Subject: doc: add note about fast_pattern w base64_data
X-Git-Tag: suricata-8.0.0-beta1~1333
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6d925965480ccd0af52b45750745f37268e1e3fb;p=thirdparty%2Fsuricata.git

doc: add note about fast_pattern w base64_data

Bug 5220
---

diff --git a/doc/userguide/rules/base64-keywords.rst b/doc/userguide/rules/base64-keywords.rst
index 7daf0c2603..81db203448 100644
--- a/doc/userguide/rules/base64-keywords.rst
+++ b/doc/userguide/rules/base64-keywords.rst
@@ -62,3 +62,5 @@ Example::
     alert http any any -> any any (msg:"Example"; content:"somestring"; http_uri; \
          base64_decode:bytes 8, offset 1, relative; \
          base64_data; content:"test"; sid:10001; rev:1;)
+
+.. note:: ``base64_data`` cannot be used with ``fast_pattern`` and will result in a rule load error.